CVE-2024-58337: Akuvox Smart Intercom S539 Improper Access Control via ServicesHTTPAPI

Published Dec 30, 2025
·
Updated

Akuvox Smart Intercom S539 contains an improper access control vulnerability that allows users with 'User' privileges to modify API access settings and configurations. Attackers can exploit this vulnerability to escalate privileges and gain unauthorized access to administrative functionalities.

Affected Software

27 affected components
Akuvox Smart Intercom S539
All of the following
Akuvox S539 Firmware=912.30.1.137
Akuvox S539
All of the following
Akuvox S532 Firmware=912.30.1.137
Akuvox S532
All of the following
Akuvox X916 Firmware=912.30.1.137
Akuvox X916
All of the following
Akuvox X915 Firmware=912.30.1.137
Akuvox X915
All of the following
Akuvox X912 Firmware=912.30.1.137
Akuvox X912
All of the following
Akuvox R29 Firmware=912.30.1.137
Akuvox R29
All of the following
Akuvox E16c Firmware=912.30.1.137
Akuvox E16c
All of the following
Akuvox R20k-2 Firmware=912.30.1.137
Akuvox R20k-2
All of the following
Akuvox R20a-2 Firmware=912.30.1.137
Akuvox R20a-2
All of the following
Akuvox C313w-2 Firmware=912.30.1.137
Akuvox C313w-2
All of the following
Akuvox Ns-2 Firmware=912.30.1.137
Akuvox Ns-2
All of the following
Akuvox Nc-2 Firmware=912.30.1.137
Akuvox Nc-2
All of the following
Akuvox Nx-2 Firmware=912.30.1.137
Akuvox Nx-2

Event History

Dec 30, 2025
CVE Published
via MITRE·10:41 PM
Data Sourced
via MITRE·10:41 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2024-58337?

CVE-2024-58337 is classified as a high severity vulnerability due to its potential for privilege escalation.

2

How do I fix CVE-2024-58337?

To fix CVE-2024-58337, ensure that access controls are properly configured to restrict user privileges from modifying API access settings.

3

What are the consequences of exploiting CVE-2024-58337?

Exploiting CVE-2024-58337 could allow an attacker to gain unauthorized administrative access and modify sensitive configurations.

4

Which devices are affected by CVE-2024-58337?

CVE-2024-58337 affects the Akuvox Smart Intercom S539 device.

5

Who is vulnerable to CVE-2024-58337?

Users with 'User' privileges on the Akuvox Smart Intercom S539 are vulnerable to the effects of CVE-2024-58337.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203